AMENDMENTS TO THE CLAIMS 

• At time of the Action: Claims 1-5, 7-13, 15-34 

• Amended Claims: 1, 9, 16, 23-30 

• After this Response: Claims 1-5, 7-13, 15-34 

The following listing of claims replaces all prior versions and listings of claims in 
the application. 

1. (Currently Amended) An out-of-band method for asynchronously 
establishing a secure association with a r e mot e server node, the method comprising: 

allowing a client node to remotely load an operating system; 
loading the operating system on the client node, wherein a profile of the operating 
system is stored on the server node: 

generating a local public value and a local private value on at l e ast on e the client 

node; 

storing the public value for configuration of the secure association on an out-of 
band computer-readable storage medium, wherein the stored public value is not used for 
authentication; 

transporting the out-of-band computer-readable storage medium to the oth e r 
server node to establish a trust relationship allowing for remotely loading the operating 
system on the client node fi'om the server node, wherein a low level of trust is required : 

receiving the public value from the oth e r server node via the out-of-band 
computer-readable storage medium; and 

generating a secret value using the local private value in combination with the 
public value received from the other server node; wherein the receiving is asynchronous 
to the generating. 
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2. (Original) A method according to Claim 1, wherein the method is 
performed on both of a pair of nodes, and wherein further the secret values generated at 
both of the nodes are symmetric. 

3. (Original) A method according to Claim 2, wherein the generating a 
secret value includes performing a Diffie-Hellman computation. 

4. (Original) A method according to Claim 1, fiirther comprising: 
retaining the secret value locally; 

protecting the secret value using the public value received from the other node; 

and 

fransmitting the protected secret value to the other node via the out-of-band 
mechanism. 

5. (Original) A method according to Claim 4, wherein the generating a 
secret value includes performing a Rivest-Shamir-Adleman (RSA) computation. 

6. (Canceled) 

7. (Original) A method according to Claim 1, wherein the receiving of the 
public value from the other node via an out-of-band mechanism includes downloading 
the public value from an external device. 
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8. (Original) A method according to Claim 7, wherein the external device is 
any one of a personal digital assistant (PDA), flash memory, memory stick, barcode, 
smart card, USB-compatible device, Bluetooth-compatible device, and infrared- 
compatible device. 

9. (Currently Amended) A computer-readable storage medium having one 
or more instructions causing one or more processors to: 

load an operating system on a processor, wherein a profile of the operating system 
is stored on an another processor: 

generate a local two-part code having a public code component and a.private code 
component to allow the processor to remotely load the operating system from the another 
processor : 

store the public component on a peripheral out-of-band device which is then 
transported over an out-of-band mechanism to [[a]] the another processor for 
configuration of the a^secure association and not authenticatio n, wherein a low level of 
trust is required for fransport : 

receive the public code component asynchronously from another processor via the 
peripheral device; and 

generate a secret value using the local private code component and the public 
code component received from the other processor. 
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10. (Previously Presented) A computer-readable storage medium according to 
Claim 9, wherein the one or more instructions are executed on the other processor, and 
wherein further the secret value is symmetrical to the secret value generated on the other 
processor. 

1 1 . (Previously Presented) A computer-readable storage medium according to 
Claim 9, wherein the one or more instructions to generate a secret value includes one or 
more instructions to perform a Diffie-Hellman computation. 

12. (Previously Presented) A computer-readable storage medium according to 
Claim 9, further comprising one or more instructions causing one or more processors to: 

encode the secret value using the public code component received from the other 
processor; and 

transmit the encoded secret value to the other processor via the peripheral device. 

13. (Previously Presented) A computer-readable storage medium according to 
Claim 12, wherein the one or more instructions to generate a secret value includes one or 
more instructions to perform an RSA computation. 

14. (Canceled) 

15. (Previously Presented) A computer-readable storage medium according to 
Claim 9, wherein the one or more instructions to receive the public code component from 
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the other processor via the peripheral device includes downloading the public code 
component from one of a personal digital assistant (PDA), flash memory, memory stick, 
barcode, smart card, USB-compatible device, Bluetooth-compatible device, and infrared- 
compatible device. 

16. (Currently Amended) An apparatus, comprising: 
a computer-readable storage medium; 

a key generator on a first node to generate a local public/private key pair; 

a computer processor executing code to write the local public/private key pair to 
an out-of-band computer-readable storage medium to facilitate setup of a secure 
association and not for authenticatio n, wherein the secure association allows the first 
node to remotely load an operating system having a profile stored on a second node : 
[[and]] 

a shared secret generator on the second node to receive the public key from the 
first node via the out-of-band computer-readable storage medium connection without 
requiring a high degree of trust between the first node and the second node: and 

which is abl e t he shared secret generator t o generate a shared secret using the 
local private key and the public key received from the first node. 

17. (Original) An apparatus according to Claim 16, wherein the shared secret 
is symmetrical to a shared secret generated on the other node using the local public key 
and a private key corresponding to the other node. 
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18. (Original) An apparatus according to Claim 16, wherein the other node is 

a server. 

19. (Original) An apparatus according to Claim 16, wherein the shared secret 
generator is to generate a shared secret by performing a Diffie-Hellman computation. 

20. (Original) An apparatus according to Claim 16, further comprising an 
encoder to encode the secret value using the public key received from the other node and 
to transmit the encoded secret value to the other node via the out-of-band connection. 

21. (Original) An apparatus according to Claim 20, wherein the shared secret 
generator is to generate a shared secret by performing an RSA computation. 

22. (Original) An apparatus according to Claim 16, wherein the out-of-band 
connection includes any one of a personal digital assistant (PDA), flash memory, memory 
stick, barcode, smart card, USB-compatible device, Bluetooth-compatible device, and 
infrared-compatible device. 

23. (Currently Amended) A method for running a protocol for establishing a 
trust relationship between two or more processing nodes, comprising: 

generating a public key and a private key on each of at least two nodes allowing a 

first node of at least two nodes to remotely load an operating system, wherein a profile of 
the operating system is stored on a second node of at least two nodes ; 
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exchanging the public keys asynchronously between the at least two nodes using 
an out-of-band mechanism comprising a computer-readable storage medium wherein the 
public keys are not used for authentication and without requiring a high degree of trust 
for an exchange of the public keys between the two nodes : and 

calculating a secret to be shared on at least one of the two nodes. 

24. (Currently Amended) A method for running a protocol according to 
Claim 23, wherein the calculating of the secret to be shared includes performing a 
function using the public key from the other of the two nodes and the private key. 

25. (Currently Amended) A method for running a protocol according to 
Claim 24, wherein the calculating the secret to be shared includes performing a Diflfie- 
Hellman calculation. 

26. (Currently Amended) A method for running a protocol according to 
Claim 24, wherein the secret to be shared is symmetrical on the at least two nodes. 

27. (Currently Amended) A method for running a protocol according to 
Claim 23, further comprising: 

encoding the secret to be shared using the public key from the other of the two 
nodes; and 

transmitting the encoded secret to be shared to the other of the two nodes via the 
out-of-band mechanism. 



28. (Currently Amended) A method for running a protocol according to 
Claim 27, wherein the calculating the secret to be shared includes performing an RSA 
calculation. 

29. (Currently Amended) A method for running a protocol according to 
Claim 23, wherein the out-of-band mechanism includes any one of a personal digital 
assistant (PDA), flash memory, memory stick, barcode, smart card, USB-compatible 
device, Bluetooth-compatible device, and infrared-compatible device. 

30. (Currently Amended) An apparatus, comprising: 

means for generating a local public/private key pair to allow a node to remotely 
load an operating system through a secure association with another node, wherein a 
profile of the operating system is stored on the another node ; 

means for storing a public key on an out-of-band computer-readable storage 
medium; 

means for transporting asynchronously the public key to another node; 

means for receiving at another node the public key from the out-of-band 
computer-readable storage medium wherein the public key is used for configuration of 
the secure association and n ot used for authentication; and 

means for generating a shared secret using the local private key and the public key 
received from the other node asynchronously via the out-of-band computer-readable 
storage medium. 
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31. (Original) An apparatus according to Claim 30, wherein the means for 
generating a shared secret performs a Diffie-Hellman computation. 

32. (Original) An apparatus according to Claim 30, further comprising means 
for encoding the shared secret using the public key received from the other node. 

33. (Original) An apparatus according to Claim 32, wherein the means for 
generating a shared secret performs an RSA computation. 

34. (Previously Presented) An apparatus according to Claim 30, wherein the 
out-of-band computer-readable storage medium includes any one of a personal digital 
assistant (PDA), flash memory, memory stick, barcode, smart card, USB-compatible 
device, Bluetooth-compatible device, and infrared-compatible device. 
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